Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/3230302e3135392e3139322e302f31392d3234203d3e203233313036.roa
File:                     3230302e3135392e3139322e302f31392d3234203d3e203233313036.roa (raw, json)
Hash identifier:          iGMOd47M5uWbbYeb+wsHhGhg/lxiEN/aWwAbwYJITbs=
Subject key identifier:   22:4A:F4:82:A3:D4:64:4A:20:1D:CD:DD:F1:C2:A7:C4:37:7B:09:5E
Certificate issuer:       /CN=E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC
Certificate serial:       7B6269176F946D7587A843DCC5501A5E00DDB40F
Authority key identifier: E6:DD:4A:59:FA:8F:F5:B9:19:C1:CC:8C:B6:3B:8E:D9:50:2A:B7:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/3230302e3135392e3139322e302f31392d3234203d3e203233313036.roa
Signing time:             Fri 23 May 2025 06:13:19 +0000
ROA not before:           Fri 23 May 2025 06:08:19 +0000
ROA not after:            Fri 22 May 2026 06:13:19 +0000
asID:                     23106
IP address blocks:        200.159.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.crl
                          rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 20:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:62:69:17:6f:94:6d:75:87:a8:43:dc:c5:50:1a:5e:00:dd:b4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC
        Validity
            Not Before: May 23 06:08:19 2025 GMT
            Not After : May 22 06:13:19 2026 GMT
        Subject: CN=224AF482A3D4644A201DCDDDF1C2A7C4377B095E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:bb:93:a3:bf:7a:43:4a:9c:d6:c4:65:8d:
                    b0:af:34:2d:94:79:94:8e:e3:4a:ad:f4:d7:87:5a:
                    50:5c:44:fe:6d:9a:bb:ac:5e:f3:c8:5f:1a:f5:f5:
                    39:cb:02:02:7e:85:25:08:40:f6:f1:02:cc:f1:00:
                    bc:06:15:74:59:31:5e:a8:9b:da:24:21:ec:cb:38:
                    96:22:56:1a:f3:73:76:93:af:12:8c:6a:aa:06:11:
                    fe:f0:1e:a3:86:a6:2a:e8:59:e8:a0:8d:e5:22:6f:
                    fa:2d:39:b5:9f:12:5a:21:92:35:97:35:91:93:81:
                    e6:77:d8:81:41:cb:d8:01:ac:54:9a:ba:89:81:c4:
                    77:bf:01:46:e6:6b:d1:c9:67:df:66:1e:04:7d:8f:
                    38:24:a9:9a:9c:bd:ac:7e:5e:42:cc:0a:91:71:9d:
                    75:64:2f:b6:1d:52:f9:85:fb:94:77:20:75:7e:9c:
                    c4:33:85:3c:d4:1e:9c:80:d6:a0:44:0f:d4:6f:cb:
                    60:76:5b:25:ef:43:92:59:0e:7e:a7:08:62:2a:4e:
                    13:be:b6:9b:f1:b4:d1:cd:38:48:c5:c2:41:ae:1d:
                    07:d4:11:24:ed:84:b8:ad:60:e7:0e:37:5a:7d:f0:
                    cd:9b:3a:e5:04:c5:72:bd:a7:4a:b0:93:15:52:81:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4A:F4:82:A3:D4:64:4A:20:1D:CD:DD:F1:C2:A7:C4:37:7B:09:5E
            X509v3 Authority Key Identifier:
                keyid:E6:DD:4A:59:FA:8F:F5:B9:19:C1:CC:8C:B6:3B:8E:D9:50:2A:B7:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/3230302e3135392e3139322e302f31392d3234203d3e203233313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.159.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         94:3d:2c:44:dc:46:b0:c7:42:7f:2b:fe:da:da:c5:5f:4f:0f:
         f1:7c:58:d2:c4:a4:f9:d9:53:ac:98:28:34:a9:82:b6:08:74:
         60:a3:9f:c2:51:94:14:14:aa:d8:84:6e:66:2f:41:9e:d6:2b:
         c3:13:7d:73:7a:56:db:b7:f0:fc:73:ad:b6:5c:8e:ff:56:7d:
         95:2b:4f:72:79:8e:84:d1:19:83:8d:3b:af:0d:39:66:68:32:
         52:40:c5:e4:de:65:10:7a:1c:01:4a:23:84:d3:fe:f0:29:77:
         c9:d8:e9:1c:46:1f:eb:9f:90:04:e9:4f:ae:50:f7:50:20:0d:
         3f:ba:b7:e4:e8:02:a7:24:bd:58:4a:e1:7f:af:0b:eb:c4:f7:
         ee:3a:07:ed:60:d0:b7:e9:7c:ef:0c:73:2c:d3:d1:ff:df:f8:
         c8:07:b5:7d:7c:4b:c1:8c:43:ec:0a:73:1d:c1:0f:f7:cd:0e:
         06:65:a6:43:95:1c:e0:f8:0b:fc:16:c9:d7:e0:d6:78:61:05:
         cd:e4:77:34:e9:74:7e:12:9b:07:ad:e9:fb:e8:e0:a6:e2:2c:
         77:a7:0e:8d:db:7f:e3:20:2b:35:60:c6:44:42:c7:c4:1b:09:
         91:d7:55:ff:8e:b9:69:84:34:ea:88:39:0e:09:02:44:4a:40:
         44:29:32:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:03:06 2025 by rpki-client